AWS Bitnami SSL Certificate Setup via SSH Console

  1. Overview
  2. 01_Notes & Guides
  3. AWS Bitnami SSL Certificate Setup via SSH Console

AWS Bitnami – Set Up SSL Certificate via SSH

This guide walks through setting up an SSL certificate on an AWS Bitnami server using the built-in Bitnami certificate tool (bncert-tool).

When to Use This Guide

Use this process if:

  • You want to enable HTTPS on a Bitnami-hosted site

  • Your domain is already pointing to the server

  • SSL has not yet been configured

Prerequisites

Before starting, ensure:

  • You are using AWS Lightsail with a Bitnami instance

  • Your domain DNS is correctly pointing to the server IP

  • You have SSH access to the instance

  • You have a valid email address (used for SSL notifications)

Step 1: Open SSH to the Server

  1. Log in to AWS Lightsail

  2. Open your server instance

  3. Click Connect using SSH (browser-based SSH console)

Once connected, you should see a terminal prompt.

Step 2: Run the Bitnami SSL Tool

In the SSH console, run the following command:

sudo /opt/bitnami/bncert-tool

This launches Bitnami’s guided SSL setup tool.

Step 3: Follow the Interactive Prompts

The tool will ask several questions. Respond as follows:

  • Confirm domain configuration → Type Y (Yes)

  • Run checks and validations → Type Y (Yes)

  • Additional configuration prompts → Answer Y or N as appropriate for your setup

Take your time and read each prompt carefully.

Step 4: Enter Email Address

When prompted, enter a valid email address.

This email is used by Let’s Encrypt for:

  • Expiration notices

  • Certificate-related alerts

Step 5: Complete the Script

Once all prompts are answered, the tool will:

  • Request the SSL certificate

  • Configure the web server

  • Enable HTTPS automatically

Wait for the process to complete.

Step 6: Verify SSL Is Working

After the script finishes:

  • Open your website in a browser

  • Confirm the site loads using https://

  • Look for the padlock icon in the address bar

Troubleshooting Tips

If SSL does not activate:

  • Confirm DNS is fully propagated

  • Make sure the domain entered matches the site domain exactly

  • Re-run the tool if needed:

sudo /opt/bitnami/bncert-tool

Summary

  • Connect to AWS Lightsail via SSH

  • Run bncert-tool

  • Confirm prompts and enter email

  • HTTPS is automatically configured

This is the recommended and supported method for enabling SSL on Bitnami servers.